Bucket railiance-platform-pg-backup is private in nl-ams with versioning and a 30-day lifecycle. Fill reef attributes and topology. Create script is idempotent. Billing budget still needs a console click.
aws CLI is not installed here. Create still needs Object Storage permission on the bootstrap key.
Read bootstrap creds from OpenBao only. Write non-secret attributes after create. Never print keys.
